Frequently Asked Questions

Everything you need to know about HauraForm.

What is HauraForm?+

HauraForm is a form submission management platform, a smart inbox where every form submission is tracked through an 8-state lifecycle. It gives teams a structured way to receive, review, approve, and manage form submissions with built-in security, webhooks, and collaboration features.

Do I need to build forms with HauraForm?+

No. HauraForm is a form backend, not a form builder. You keep your existing HTML forms and simply point them to your HauraForm endpoint. It works with any frontend: static sites, React, Vue, WordPress, or anything that can submit a form.

What submission states are available?+

HauraForm supports 8 submission states: Received, Validated, Processing, Approved, Follow Up, Completed, Rejected, and Archived. Each transition is protected by guard-based logic, and every state change is recorded in the audit trail.

What security features does HauraForm offer?+

Every form gets 10 configurable security controls: honeypot fields, allowed origins, rate limiting, blocked IPs, API keys, HMAC signatures, duplicate prevention, CAPTCHA (supporting 4 providers), spam actions, and ignored fields. All controls are independently toggleable per form.

Can I integrate with other tools?+

Yes. HauraForm supports multiple webhooks per form with HMAC signing, 10 conditional operators, and automatic retry with exponential backoff. Built-in integrations include Slack, Telegram, SMTP email, Google Sheets, Zapier, Make, and n8n with customizable message templates.

How does team collaboration work?+

HauraForm supports multi-organization workspaces with 4 roles (Owner, Admin, Editor, Viewer), 18 granular permissions across 6 permission groups, and email-based invitations. Data is fully isolated between organizations.

What CAPTCHA providers are supported?+

HauraForm supports 4 CAPTCHA providers: Cloudflare Turnstile, Google reCAPTCHA v2, Google reCAPTCHA v3, and hCaptcha. Each provider can be configured per form with its own site key and secret key, and CAPTCHA verification runs as part of the security pipeline before a submission is accepted.

How do webhooks work?+

Each form can have multiple webhooks that fire on new submissions. Webhooks support HMAC signature verification, 10 conditional operators (equals, contains, starts with, greater than, etc.) to filter which submissions trigger them, and automatic retry with exponential backoff. Every delivery is logged with the full request and response for debugging.

What export formats are supported?+

All plans support CSV and JSON exports. Premium and Business plans unlock advanced export formats including XLSX (Excel) and PDF. Business plans also get scheduled exports for automated recurring data delivery.

How does data retention work?+

Submission data retention varies by plan: 30 days on Free, 1 year on Starter, 3 years on Premium, and unlimited on Business. Audit log retention follows a similar pattern: none on Free, 7 days on Starter, 90 days on Premium, and unlimited on Business.

Does HauraForm have a REST API?+

Yes. HauraForm provides a versioned RESTful API under /api/v1 for managing forms, submissions, fields, webhooks, and analytics. Authenticate with Bearer tokens via the Authorization header. The API is rate-limited to 60 requests per minute per IP.

How does spam detection work?+

HauraForm includes automatic spam detection that checks submissions against built-in spam keywords and flags messages containing excessive URLs (3 or more). You can add custom keywords per form. When spam is detected, the submission is flagged and can optionally trigger auto-blocking of the sender’s IP address after a configurable threshold.

What is schema enforcement?+

Schema enforcement controls how strictly submissions are validated against your defined form fields. Three modes are available: None (accept any data), Hybrid (validate defined fields but also accept extra fields), and Strict (only accept fields defined in the schema). This helps prevent unwanted data from reaching your inbox.

How does duplicate prevention work?+

HauraForm can detect and reject duplicate submissions based on one or more fields with AND/OR logic. For example, you can block repeat submissions from the same email address within a configurable time window (default 60 minutes). Duplicates receive a 409 Conflict response.

What are the file upload limits?+

File upload limits scale with your plan. Free allows 1 upload per form with 5 MB max file size and 100 MB total storage. Starter allows 5 uploads per form, 10 MB max, and 2 GB storage. Premium allows 10 uploads per form, 25 MB max, and 20 GB storage. Business allows 20 uploads per form, 100 MB max, and 100 GB storage.

How does the audit trail work?+

Every significant action in HauraForm is recorded in the audit trail, including creates, updates, deletes, approvals, and rejections. Each audit entry captures the user, IP address, user agent, old and new values, and a checksum for integrity verification. Retention depends on your plan.

Can I use HauraForm with static sites?+

Yes. HauraForm works with any frontend that can submit an HTML form or make an HTTP request. Point your form’s action attribute to your HauraForm endpoint URL, and submissions are received, validated, and managed in your HauraForm inbox. No JavaScript SDK is required.

Does HauraForm support multiple organizations?+

Yes. Users can belong to multiple organizations, and each organization has fully isolated data, members, forms, and billing. Switch between organizations without logging out. Each organization manages its own API keys, team members, and subscription independently.

Is HauraForm free?+

Yes. The Free plan includes up to 3 forms, 100 submissions per month, 100 MB file storage, and basic security features at no cost. Paid plans (Starter, Premium, and Business) unlock higher limits, more integrations, advanced analytics, and enterprise features like SSO and white-label branding.

When is HauraForm launching?+

HauraForm is currently in active development. Join the waitlist to be the first to know when we launch and to get early access.